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IN THE CLAIMS 

I . (Currently Amended) A computerized method to provide secure key selection 
comprising: 

transmitting a license from a server to a secure device for storage, the license containing a 
product key of a watercrypted content and a client identifier; 

transmitting via an electronic network an entitlement control message containing a 
plurality of content keys associated with said watercrypted content to said secure device; 

transmitting a request to provide a session content key from said plurality of content 
keys, said session content key encrypted at said secure device using a transport key encrypted 
with a public key associated with said server, and said session content key being te-be used to 
decrypt said watercrypted content; and 

receiving said session content key from said secure device in response to said request. 

5. (Currently Amended) The method according to claim 4, wherein said establishing ftirther 
comprises: 

encrypting [[a]]said transport key with a personal public key; and 
transmitting said transport key to said secure device. 

I I . (Currently Amended) A computerized method to provide secure key selection 
comprising: 

electronically storing a license containing a product key of a watercrypted content and a 
client identifier from a decoder; 

receiving via an electronic network an entitlement control message containing a plurality 
of content keys associated with said watercrypted content from said decoder; 

receiving a request to provide a session content key from said plurality of content keys, 
said session content key to be used to decrypt said watercrypted content; 

selecting said session content key using said product key and said client identifier from 
said license; 

receiving a transport kev encrypted with a public key of said decoder: 
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encrypting said session content key with said transport key: and 

transmitting said session content key to said decoder in response to said request. 

14. (Canceled) 

16. (Currently Amended) Electronic apparatus to provide secure key selection comprising: 
means for trsuismitting a license from a server to a secure device for storage, the license 

containing a product key of a watercrypted content and a client; 

means for transmitting via an electronic network an entitiement contiol message 

containing a plurality of content keys associated with said watercrypted content to said secure 

device; 

means for transmitting a request to provide a session content key from said plurality of 
content keys, said session content key encrypted at said secure device using a fransport key 
encrypted with a public key associated with said server, and said session content key being to%e 
used to decrypt said watercrypted content; and 

means for receiving said session content key from said secure device in response to said 
request. 



26. (Currentiy Amended) Electronic apparatus to provide secure key selection comprising: 

means for electronically storing a license containing a product key of a watercrypted 
content and a client identifier fix)m a decoder; 

means for receiving via an electronic network an entitiement contirol message containing 
a plurality of content keys associated with said watercrypted content from said decoder; 

means for receiving a request to provide a session content key from said plurality of 
content keys, said session content key to be used to decrypt said watercrypted content; 

means for selecting said session content key using said product key and said client 
identifier from said license; 

means for receiving a transport key encrypted with a public key of said decoder: 
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means for encrypting said session content key with said transport key: and 
means for transmitting said session content key to said decoder in response to said 
request. 



29. (Canceled) 



3 1 . (Currently Amended) A computer readable medium containing executable instructions, 
which, when executed in a processing system, cause said processing system to perform a method 
to provide secure key selection comprising: 

transmitting a license from a server to a secure device for storage, the license containing a 
product key of a watercrypted content and a client identifier; 

transmitting via an electronic network an entitlement control message containing a 
plurality of content keys associated with said watercrypted content to said secure device; 

receiving a request to provide a session content key from said plurality of content keys, 
said session content key encrypted at said secure device using a fransport kev encrypted with a 
public key associated with said server, and said session content key being te-be used to decrypt 
said watercrypted content; and 

receiving said session content key from said secure device in response to said request. 

32. (Currentiy Amended) A computer readable medium containing executable instructions, 
which, when executed in a processing system, cause said processing system to perform a method 
to provide secure key selection comprising: 

elecfronically storing a license containing a product key of a watercrypted content and a 
client identifier from a decoder; 

receiving via an electronic network an entitlement confrol message containing a plurality 
of content keys associated with said watercrypted content from said decoder; 

receiving a request to provide a session content key from said plurality of content keys, 
said session content key to be used to decrypt said watercrypted content; 
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selecting said session content key using said product key and said client identifier firom 
said license; 

receiving a transport key encrypted with a public key of said decoder: 

encrvptinie said session content kev with said transport kev: and 

transmitting said session content key to said decoder in response to said request. 

33. (Currentiy Amended) Electronic apparatus to provide secure key selection comprising: 
a decoder; and 

a secvire device coupled to said decoder to store a license sent fix>m said decoder, said 
license containing a product key of a watercrypted content and a client identifier, to receive via 
an electronic network an entitiement control message containing a plurality of content keys 
associated with said watercrypted content Gxrni said decoder and to receive a request to provide a 
session content key firom said plurality of content keys, said secure device fiirther receives a 
transport kev encrypted with a decoder public kev of said decoder and encrypts said session 
content kev with said transport key, said session content key used to decrypt said watercrypted 
content, to select said session content key using said product key and said cUent identifier fi-om 
said license, and to transmit said session content key to said decoder in response to said request. 



44. (Canceled) 



